Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File:                     uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier:          jVbbAuVMhiEHwu6532Gf/IUYclqJkBjduBtFPDXGagk=
Subject key identifier:   BE:FC:37:16:88:BB:06:8E:F8:12:2A:9A:EA:49:00:E8:5B:16:51:30
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer:       /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial:       0803
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number:          1007
Signing time:             Thu 26 Mar 2026 21:00:31 +0000
Manifest this update:     Thu 26 Mar 2026 21:00:30 +0000
Manifest next update:     Thu 02 Apr 2026 21:00:30 +0000
Files and hashes:         1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: 7WnVwfBCxxBRZmOTHPBGkfBo+5CSJJRFvMhN1gXIB2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
        Validity
            Not Before: Mar 26 21:00:30 2026 GMT
            Not After : Apr  2 21:00:30 2026 GMT
        Subject: CN=69c59e6f-93d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:18:ac:9e:cb:46:30:83:ce:df:af:5c:fb:
                    19:e2:ea:2f:3a:83:0b:b5:c4:e4:fe:df:e7:95:5f:
                    86:9c:44:52:c4:ee:42:06:c9:24:b9:53:77:2e:dd:
                    09:c1:2f:da:66:75:4e:73:ee:ce:af:08:3d:98:65:
                    8c:31:15:0a:fd:4f:f1:e2:25:20:b4:34:e6:2b:93:
                    10:25:4b:ff:9e:61:f2:d3:80:81:44:39:a4:ee:90:
                    11:15:f0:6e:08:2c:c5:cf:d7:c9:c7:7f:95:c6:ec:
                    6b:bb:7d:77:74:32:25:8a:56:3a:f1:c3:3f:75:59:
                    d2:c1:5b:b7:e7:f8:c7:df:7b:39:cb:55:b3:8a:8c:
                    2a:b9:99:09:30:e1:d8:e7:f4:b7:97:7b:b6:5e:ff:
                    48:a4:5e:08:8a:9c:e3:8c:2a:96:0b:d6:43:22:e6:
                    3a:23:85:3f:1e:47:07:69:16:d1:7d:6f:62:81:ec:
                    ab:1c:70:87:53:bb:87:5e:fc:d3:c9:de:d7:af:28:
                    4f:6d:24:b2:42:5a:d0:bb:01:87:6f:9e:b9:d7:1b:
                    0d:0b:a5:86:b7:05:40:db:bd:11:4c:bd:a8:14:f1:
                    e9:4a:b5:3e:b5:36:aa:a2:b8:61:22:bf:f7:fb:80:
                    9e:1d:39:01:fd:a3:b2:6c:58:76:6e:68:05:cb:17:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FC:37:16:88:BB:06:8E:F8:12:2A:9A:EA:49:00:E8:5B:16:51:30
            X509v3 Authority Key Identifier:
                keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:39:b4:44:5b:17:48:79:7b:cf:fb:51:2e:1d:f3:cb:f0:
         7a:62:27:18:f0:ce:7d:99:66:da:ae:7d:4b:d3:2c:e0:cb:89:
         51:fe:e0:73:28:34:0c:01:cd:f7:7e:3c:9c:48:24:db:20:e8:
         e8:29:3f:bd:ca:59:ee:56:38:15:89:97:23:32:6a:bc:5a:3c:
         8d:79:ef:f4:99:70:5a:89:dd:94:31:9f:7c:83:01:3a:d2:93:
         51:f2:18:4e:da:de:63:99:d8:28:8d:e1:0f:0a:f3:17:34:da:
         a0:80:d5:81:92:cc:5a:9b:40:a3:8e:ba:ec:10:78:90:b8:e4:
         7e:ee:83:8d:67:35:bf:a4:84:e0:52:27:88:15:1f:49:b0:1c:
         5b:cf:0e:a8:41:ba:72:b9:29:f9:88:c5:ba:2e:06:68:55:4e:
         b1:cb:1b:b2:df:c0:ed:3c:f2:14:bc:68:af:ff:25:01:af:7f:
         b2:16:99:6f:d8:8e:94:ab:23:1e:24:67:88:01:c3:3b:48:17:
         db:c1:67:b1:fe:fd:a4:70:2f:c9:44:3b:5e:ae:c1:18:c5:8b:
         04:26:19:e1:19:af:86:c0:30:05:af:c4:eb:13:f5:af:c5:48:
         e1:30:a2:04:22:63:bd:c8:c0:84:51:ab:cb:c7:58:df:5f:ec:
         63:02:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:33 2026 by rpki-client